6.3

CVE-2025-40745

A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerSiemens
≫
Produkt Siemens Software Center
Default Statusunknown
Version 0
Version < V3.5.8.2
Status affected
HerstellerSiemens
≫
Produkt Simcenter 3D
Default Statusunknown
Version 0
Version < V2506.6000
Status affected
HerstellerSiemens
≫
Produkt Simcenter Femap
Default Statusunknown
Version 0
Version < V2506.0002
Status affected
HerstellerSiemens
≫
Produkt Simcenter STAR-CCM+
Default Statusunknown
Version 0
Version < V2602
Status affected
HerstellerSiemens
≫
Produkt Solid Edge SE2025
Default Statusunknown
Version 0
Version < V225.0 Update 13
Status affected
HerstellerSiemens
≫
Produkt Solid Edge SE2026
Default Statusunknown
Version 0
Version < V226.0 Update 04
Status affected
HerstellerSiemens
≫
Produkt Tecnomatix Plant Simulation
Default Statusunknown
Version 0
Version < V2504.0008
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.071
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
productcert@siemens.com 3.7 2.2 1.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
productcert@siemens.com 6.3 0 0
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-295 Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.